Wupsales vulnerabilities
Products
Newest
- wupsales ai copilot – content generator AI Copilot – Content Generator <= 1.5.6 - Unauthenticated Privilege Escalation via Custom Workflow Route 9.8 Critical
- wupsales ai copilot – content generator AI Chatbot & Workflow Automation by AIWU <= 1.4.6 - Missing Authorization to Unauthenticated Sensitive Information Exposure 7.5 High
- wupsales ai copilot – content generator AI Copilot <= 1.5.4 - Authenticated (Subscriber+) SQL Injection via 'order[0][dir]' Parameter 6.5 Medium
- wupsales ai copilot – content generator AI Chatbot & Workflow Automation by AIWU <= 1.4.12 - Missing Authorization to Unauthenticated Arbitrary Modification via 'publishTasks' and 'unpublishTasks' AJAX Actions 5.3 Medium
- wupsales ai copilot – content generator AI Chatbot & Workflow Automation by AIWU <= 1.4.12 - Missing Authorization to Unauthenticated Arbitrary Data Deletion via AJAX Actions 'removeGroup' and 'clear' 5.3 Medium
- wupsales ai chatbot & workflow automation by aiwu AI Chatbot & Workflow Automation by AIWU <= 1.4.14 - Unauthenticated Stored Cross-Site Scripting via 'X-Forwarded-For' Header 6.4 Medium
- wupsales ai chatbot & workflow automation by aiwu AI Chatbot & Workflow Automation by AIWU <= 1.4.17 - Unauthenticated SQL Injection in getListForTbl() 7.5 High